imPC@ndo IT

Tracker / CVE-2022-31778

CVE-2022-31778

High 7.5

Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.

Affected products and versions

apache traffic_server · 8.0.0 → 8.1.4
apache traffic_server · 9.0.0 → 9.1.2
debian debian_linux

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References